When you install a pirate app, you grant it permission to "read your contacts, SMS, and storage." That means the app can:
